Written 28 Aug 2026. This is a how-to, not a product card. Buy links are not tagged yet.

See if your leftover-box login can use admin commands

Before you change passwords or turn on the firewall, check that your leftover-box login can use sudo. You do not need extra login software.

You can SSH in from the couch. Then a note says type sudo, and the leftover box answers that your login is not in the sudoers file. That is not a broken router. That is not a reason to buy a new mini PC. Your leftover-box login is missing the admin club. Marketplace boxes do this a lot: the old owner kept the admin login, and the account you use every day cannot install or change much.

Skip until SSH works

If you cannot log in from the couch, stop. That is SSH from the couch. You can also type this at the leftover-box keyboard. Prefer this look after you know who else can still log in: see if the leftover box still has old login accounts. This note assumes you can log in from the couch, or sit at the leftover-box keyboard.

What sudo is

sudo is the leftover box's "do this as an admin" button. Everyday install, update, firewall, and share notes use it. Without sudo, password changes for other people, weekly fixes, and ufw all stop. The admin club on Debian and Ubuntu is usually a group named sudo. Some leftover images say admin or wheel instead. Same idea.

Ask who you are, then which clubs

SSH in from the couch, or sit at the leftover-box keyboard, then ask:

whoami

That prints your leftover-box login name. Then ask which clubs that login is in:

groups

Look for the word sudo in the list. admin or wheel counts too. If you want the same answer as a numbered list:

id

You should see something like groups=…(sudo) when you are in the club.

Confirm with a harmless sudo

Ask the leftover box to check sudo without changing anything:

sudo -v

Type your leftover-box login password when it asks. If it returns to a quiet prompt, you are in. If it says you are not in the sudoers file, or that the password is wrong after you know the password is right, your login is not an admin yet.

Optional one-liner that needs no password prompt when sudo already trusts this session:

sudo -n true && echo can sudo || echo cannot sudo

If you are not in the club

Do not buy login software. Sit at the leftover-box keyboard and log in as the account that can already use sudo (often the first install user, or an old Marketplace admin you found in see if the leftover box still has old login accounts). From that admin login, add your everyday name to the club. Swap youruser for the name from whoami:

sudo usermod -aG sudo youruser

Then log out and log back in (a new SSH session is enough). Ask groups again. You should see sudo. Then retry sudo -v.

If no leftover login can use sudo, you are stuck until you recover from a live USB or reinstall. That is a bigger job than this note. Do not open SSH to the internet to "fix" it.

What next

Once sudo works, set a leftover-box password you chose: change the leftover-box login password. Then put a key on your laptop: log in with a key, not the password every time. After a reinstall scare, that is when SSH says the leftover box looks different. Skip buying a camera or extra login software for this look.

Skip

• Skip this note if groups already shows sudo (or admin / wheel) and sudo -v works.
• Skip if SSH from the couch does not work yet. That is SSH from the couch.
• Skip buying a camera, a monitoring box, or extra login software because sudo failed.
• Skip editing /etc/sudoers by hand tonight. Use usermod -aG sudo from an account that already works.
• Skip opening SSH to the internet.